Privacy Policy
Last updated 18 September 2026
This explains what we do with your personal information when you contact us or travel with us — what we collect, why, who else sees it, and what you can ask us to do about it. Plain language, because a policy you cannot read protects nobody.
01Who we are
Wasili Wonders is a safari tour operator based in Nairobi, Kenya. When you send us an enquiry or book a safari, we are the data controller for the personal information you give us — we decide what is collected and why.
For anything in this policy, write to info@wasiliwonders.com or call +254 180 005 170.
02What we collect
What you type into our forms. Our enquiry and booking forms ask for your name and email address, and optionally a phone or WhatsApp number. You can also tell us which safari or destination interests you, your rough travel dates, how many people are travelling, and whatever you write in the message box.
What you send us directly. If we go on to plan a trip together, we will need more — passport details for permits and internal flights, dietary requirements, and any medical or mobility information relevant to your safety on safari. We ask for these when they are needed, not before.
Basic technical information. Our servers log the IP address of requests, which we use to rate-limit the enquiry form against spam. Our hosting provider keeps standard access logs.
We do not run advertising trackers, and we do not buy personal information about you from anyone else.
03Why we use it, and on what basis
- To answer your enquiry and plan your safari — this is the whole point of the form. We rely on taking steps at your request before entering a contract, and then on performing that contract.
- To make the bookings your trip needs — passing the necessary details to the lodges, camps, airlines and permit authorities on your itinerary.
- To keep you safe on safari — so guides and camps know about a medical condition or allergy before it matters. Health information is sensitive, and we use it only with your explicit consent and only where it is relevant.
- To keep our records and meet legal obligations — tax and accounting rules oblige us to keep booking records.
- To protect the site — rate-limiting and spam filtering, on the basis of our legitimate interest in keeping it usable.
We will only send you marketing if you have asked for it, and every such message will have a way to stop. Answering your enquiry is not marketing, and we will not add you to a mailing list for having contacted us.
06Where your information is held
We are based in Kenya, but the servers and database behind this website are hosted by Amazon Web Services in the United States. Your information is therefore transferred outside Kenya and stored there.
We use that provider because of its security and reliability, under contractual terms covering the protection of personal data. If you would prefer not to have your information handled this way, email or phone us instead of using the form and tell us.
07How long we keep it
Enquiries that do not turn into a booking are kept for up to two years, so we can pick up the thread if you come back to us, and then deleted.
Booking records are kept for seven years after travel, because tax and accounting law requires it. Passport details and health information are not part of that long-term record — we delete them once the trip they were needed for is over.
08How we protect it
The whole site is served over HTTPS. The database is not reachable from the public internet, and access to the admin area is restricted to named accounts with individual sign-in.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information and puts you at risk, we will tell you and the Office of the Data Protection Commissioner as the law requires.
09Your rights
Under Kenya's Data Protection Act 2019, you can ask us to:
- tell you what personal information we hold about you, and give you a copy;
- correct anything inaccurate or incomplete;
- delete information we no longer have a good reason to keep;
- stop or restrict a particular use, including any marketing;
- hand over information you gave us in a portable format;
- withdraw a consent you previously gave, without affecting what we did beforehand.
Email info@wasiliwonders.com and we will respond within 30 days. There is no charge. If you are not satisfied with how we have handled it, you can complain to the Office of the Data Protection Commissioner in Kenya. If you are in the UK or EU, your local data protection authority may also be able to help.
10Children
Children are very welcome on safari, but this website is meant for adults and we do not knowingly collect information directly from anyone under 18. Where children are travelling, we expect their details to come from a parent or guardian as part of the booking. If you believe a child has sent us information directly, tell us and we will remove it.
11Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top. Where a change materially affects you, we will tell you rather than rely on you noticing. See also our Terms & Conditions.